Check code quality automatically: SonarQube and security scans
Bugs, insecure code and hard-to-maintain code get more expensive the later they are found. With static code analysis and security scans in your pipelines, every change is checked automatically before it reaches production. We run SonarQube and the GitLab Security Node on dedicated servers in Germany – your source code stays under your control.
SonarQube assesses the maintainability, bugs and test coverage of your code and sets clear rules for every change with quality gates. The GitLab Security Node adds targeted scans for vulnerabilities, passwords in code and vulnerable dependencies. Both run in your existing pipelines with GitLab or Jenkins.
Code quality from 89,25 € / month incl. VAT
- Automaticchecks with every build
- Quality gatesclear rules for every change
- Own serversyour code stays in Germany
- Made in GermanyISO/IEC 27001 certified, GDPR compliant
Which solution fits you?
Code quality and security complement each other: SonarQube assesses maintainability and bugs, the Security Node looks specifically for vulnerabilities.
SonarQube server
from 89,25 €Static code analysis for around 20 languages: bugs, code smells, duplications, test coverage and quality gates – on your own managed server. SonarQube servers
GitLab Security Node
on requestScans for vulnerabilities in source code, secrets, vulnerable dependencies and container images with every push – results directly in the merge request. Security Node
Pipelines
CI/CDThe checks run in your pipelines: with GitLab CI/CD, your own GitLab runners or Jenkins. CI/CD
From your requirement to the right solution
| Your requirement | Our recommendation |
|---|---|
| Detect bugs, code smells and duplications early, quality rules for all projects. | SonarQube server – from 89,25 € |
| Make test coverage visible and stop builds with too few tests. | SonarQube server with quality gate |
| Find vulnerabilities, passwords in code and vulnerable dependencies. | GitLab Security Node – on request |
| Run checks automatically with every push. | CI/CD – GitLab, GitLab runners, Jenkins |
| Manage source code, merge requests and reviews. | GitLab server – from 101,15 € |
What you can rely on
Your own server
dedicatedSonarQube and the Security Node run on servers just for you – your projects are never processed together with those of other customers.
Your code stays in Germany
GDPRAnalysis and results stay in German data centres instead of with a cloud service abroad.
Part of your pipelines
automaticThe checks run in GitLab CI/CD or Jenkins; you see the results in the pipeline and in the merge request.
Setup by arrangement
on requestWe set up quality gates, rules and the connection to your projects together with you.
High availability on request
on requestFor large environments we run SonarQube on our own VEP Cloud.
ISO/IEC 27001
certifiedLCube itself is certified to ISO/IEC 27001 and has been providing hosting for businesses since 1995.
Which checks fit your project?
Language, repository and pipeline determine which analysis makes sense. Our specialists will advise you personally.
Why LCube – Professional Hosting?
We have been running development and project environments for teams for many years – secure, reliable and with personal support.
ISO/IEC 27001 certified
LCube itself is certified to ISO/IEC 27001. Information security is an audited standard in our own processes – not just in the data centre. More about our certification
Made in Germany
Our team works in Germany and your data is stored in German data centres. Operation is GDPR compliant.
Personal support
You talk directly to experienced specialists who know your system and personally take care of your request.
Since 1995
More than 30 years of hosting experience – from websites and online shops to development environments and business-critical servers.
Custom solutions
Whether a single server, a cluster or a special setup with VPN connection to your company network: we design the environment that fits your requirements.
Our own cloud platform
With the Virtuozzo Enterprise Cloud (VEP) we run our own cloud platform made in Germany – for highly available and business-critical workloads.
Frequently asked questions about code quality
What is static code analysis?
Static code analysis checks your source code without running the program. Tools such as SonarQube find typical bugs, insecure patterns, duplicated and hard-to-maintain code and show how well the code is covered by tests. If the analysis runs with every build, problems surface while the change is still fresh and can be fixed with little effort. SonarQube servers
SonarQube or GitLab Security Node – which do I need?
SonarQube mainly assesses the quality of your code: bugs, code smells, duplications, test coverage and security-relevant code, with quality gates for all projects. The GitLab Security Node looks specifically for security problems: vulnerabilities in source code, passwords and keys in the repository, vulnerable dependencies and insecure container images. Many teams combine both. We are happy to discuss which solution suits your projects. Ask for advice
Do I need a GitLab server for this?
Not for SonarQube. The SonarScanner runs in GitLab CI/CD, in Jenkins or in another build environment and sends the results via HTTPS to your SonarQube server – even if your projects are on GitLab.com. The GitLab Security Node works together with GitLab and can be connected to our GitLab servers or your own instance. Your own GitLab runners on root vServers are also a good fit for the pipelines.
Which programming languages does SonarQube check?
The free SonarQube Community Build checks around 20 languages, including Java, JavaScript, TypeScript, Python, PHP, C#, Go, Kotlin and Ruby, plus HTML, CSS and XML. For C, C++ and some further languages, and for analysing individual branches and merge requests, you need a commercial edition from Sonar. If you purchase the licence from the vendor, we set it up on your SonarQube server by arrangement.
Where are the servers located?
In German data centres. LCube itself is certified to ISO/IEC 27001, and operation is GDPR compliant. For analysis and to display results, SonarQube stores parts of your source code. With us this data stays in Germany on a server just for you – an important point for companies with compliance requirements. When you have questions, you reach experienced specialists in Germany rather than a call centre.
More quality in every pipeline
Choose your SonarQube server or let our specialists advise you.